Forums

Resolved
0 votes
Hi, I am using ClearOS since a few weeks.
My current goal is it to get control about the LDAP Server on my ClearOS Server to manage Authentifikations for other services and servers in my internal network.
I am not able to login with an LDAP account on any other platform, like PHPLDAPAdmin, NextCloud, or Rancher.

How could I do that?
I was able to connect PHPLDAPAdmin with the Dictionary Server but only as anonymous, but not with an priviligied account.

I hope someon could help me.
Thanks.
Tuesday, July 23 2019, 10:05 AM
Share this post:

Accepted Answer

Wednesday, July 24 2019, 08:19 AM - #Permalink
Resolved
2 votes
It looks like you need to make a number of edits to /etc/phpldapadmin/config.php. The ones I've done are:

  • // $servers->setValue('server','host','127.0.0.1');
    to
    $servers->setValue('server','host','ldap://127.0.0.1')

  • // $servers->setValue('server','port',389);
    to
    $servers->setValue('server','port',389);
    This may not be necessary as it could be default.

  • // $servers->setValue('server','base',array(''));
    to
    $servers->setValue('server','base',array('dc=howitts,dc=co,dc=uk'));
    This is your Base DN from the webconfig.

  • $servers->setValue('login','attr','uid');
    to
    // $servers->setValue('login','attr','uid');

I think that is all the changes I can spot.

Also, and you've probably already done it, I had to edit /etc/httpd/conf.d/phpldapadmin.conf to allow LAN access and restart httpd.
The reply is currently minimized Show
Responses (6)
  • Accepted Answer

    Wednesday, July 24 2019, 08:44 PM - #Permalink
    Resolved
    0 votes
    Because it is a long-standing feature request to also allow access (Publish Policies) on port 389 (ldap:// as opposed to ldaps:// on 636), I had a look at it and had the basic mods worked out and tested in an hour and a quarter. It means updating 3 packages. I've done 2 and the third is ready to build. I'll have a go at that tomorrow as the build system was misbehaving today.
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, July 24 2019, 11:16 AM - #Permalink
    Resolved
    0 votes
    I've been through the changes I made one by one. The only important one seems to be commenting out the login attribute. The host and port can be left. The Base DN seems to be optional. I have adjusted the KB article accordingly.
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, July 24 2019, 11:03 AM - #Permalink
    Resolved
    0 votes
    Thanks that worked. It didn't worked because I've forgot to set $servers->setValue('server','base',array('')); to my base DN.
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, July 24 2019, 08:54 AM - #Permalink
    Resolved
    0 votes
    I've just created this KB article to help: Installing and configuring phpLDAPadmin.
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, July 24 2019, 06:41 AM - #Permalink
    Resolved
    0 votes
    Thanks for this helpfull answer. Yes I've installed phpLDAPAdmin via "sudo yum -y install phpldapadmin" and the dictionary server is installed.
    Configurations:
    Publish Policy: Local Network
    Accounts Access: Password Access (already tried Anonymous too)

    I would like to use the LDAP server with other servers in my private network. I am running an Kubernetes Cluster orchistrated by Rancher behind ClearOS and I whant to make use of LDAP on some services.

    I've configured phpLDAPAdmin and it is able to connect, but jus as anonymous user. I tried the bind DN and the bind password but I get the following errors:
    Unable to connect to LDAP server Local LDAP Server
    Error: Server is unwilling to perform (53) for login
    error Authentication failed with server
    Invalid username or invalid password.


    I am very frustrated because I have been trying for days but without success.
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, July 23 2019, 11:35 AM - #Permalink
    Resolved
    0 votes
    How did you install phpLDAPAdmin Did you do it from the ClearOS repos? Also make sure you have the Directory Server app installed from the marketplace. Then, from the Directory Server use the Bind DN and Bind Password as your credentials in phpLDAPadmin.

    ClearOS has Nextcloud available and already integrated with LDAP, if you want.

    If you are connecting external machines to the ClearOS LDAP, from the Directory Server app, in the Policies panel, set the Publish Policy. Normally you'd choose LAN only. Connections are only allowed by LDAPS, so on port 636. There is an enhancement request to allow LDAP connections on 389, but it is not in the pipeline, yet.
    The reply is currently minimized Show
Your Reply